Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-46048

Fixed in a distro release EPSS <1%CVSS 6.2

Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem.

Published 2024-03-27 · CVE record · OSV

Products: tug tex_live

Distro releases

ReleasePackageFixed in
Debian 12texlive-binno fix
Debian 13texlive-binno fix
Debian 14texlive-binno fix
SUSE Linux Enterprise Module for Basesystem 15 SP5texlive2021.20210325-150400.31.6.4
SUSE Linux Enterprise Module for Basesystem 15 SP7texlive2021.20210325-150600.38.3.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5texlive2021.20210325-150400.31.6.4
SUSE Linux Enterprise Module for Desktop Applications 15 SP7texlive2021.20210325-150600.38.3.1
SUSE Linux Enterprise Server 12 SP5texlive2013.20130620-22.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5texlive2013.20130620-22.11.1
SUSE Linux Enterprise Software Development Kit 12 SP5texlive2013.20130620-22.11.1
openSUSE Leap 15.5texlive2021.20210325-150400.31.6.4